Security Operations Centre Specialist

This is a fully remote position, open to applicants in Ukraine.

📋 Description

• Oversee and assist in the daily operations of the Security Operations Center (SOC), which includes analyzing, triaging, investigating, and responding to security incidents.

• Monitor security alerts, engage in proactive Threat Hunting, and determine appropriate actions for incident response, mitigation, and recovery.

• Identify, analyze, and mitigate DoS/DDoS attacks at network, transport, and application layers (L3/L4/L7).

• Configure, maintain, and optimize SIEM, EDR, DLP, and DDoS protection solutions.

• Enhance detection accuracy by minimizing False Positives and refining security monitoring processes.

• Supervise security threats within AWS, Azure, and Google Workspace environments.

• Create and implement automation scripts and workflows to streamline SOC operations and incident response.

• Investigate security incidents, document findings, prepare reports, and offer recommendations.

• Conduct security assessments for new systems, applications, and both cloud and on-premises infrastructure.

• Work collaboratively with IT, Infrastructure, and Security teams to enhance threat detection and security controls.

⛳️ Requirements

• Demonstrated hands-on experience in SOC operations, encompassing security incident detection, analysis, and response.

• Extensive experience in identifying and mitigating DoS/DDoS attack vectors, such as SYN floods, UDP amplification, HTTP/HTTP2 floods, DNS reflection, and slow-and-low attacks.

• Practical knowledge of DDoS mitigation solutions like Cloudflare, Akamai Prolexic, AWS Shield, Radware, Imperva, Arbor Networks, or similar WAF/Anti-DDoS technologies.

• Hands-on experience with SIEM platforms, including the creation, configuration, tuning, and optimization of detection rules.

• Practical experience with EDR and DLP solutions, including monitoring security alerts, investigation, and incident response.

• Experience in securing cloud environments and investigating security incidents across AWS, Azure, and Google Workspace.

• Strong scripting and automation capabilities using Python, Bash, or PowerShell.

• Proven ability to reduce False Positives and optimize detection logic.

• Comprehensive understanding of network and system security, including TCP/IP, UDP, DNS, SSH, SSL/TLS, HTTP protocols, and common cyberattack methods.

• Familiarity with Windows and Linux/Unix operating systems.

• Practical experience in Threat Hunting.

• Strong analytical and problem-solving skills, employing a data-driven approach to security incident investigation.

🏝️ Benefits

• Children Allowance

• Mental Health Support

• Sport Activities

• Language Courses

• Automotive Services

• Veterinary Services

• Home Office Setup Assistance

• Dental Services

• Books and Stationery

• Training Compensation

• Massage